« Volver al listado

CVE-2019-0019

Estado: ModificadaAlta (7.5)—

Cuando la función de rastreo BGP (Border Gateway Protocol) está activada, un mensaje BGP entrante puede provocar que el proceso rpd (Routing Protocol Daemon) del Junos OS se cierre inesperadamente y se reinicie. Cuando el rpd se reinicia después de un cierre inesperado, y estos se repiten, puede resultar en una condición de denegación de servicio extendida.

Leer descripción completaMostrar menos

Las versiones afectadas son el Juniper Networks Junos OS: 16.1 versiones anteriores a 16.1R7-S4, 16.1R7-S5; 16.2 versiones anteriores a 16.2R2-S9, 16.2R3; 17.1 versiones anteriores a 17.1R3-S1; 17.2 versiones anteriores a 17.2R3-S1; 17.3 versiones anteriores a 17.3R3-S3, 17.3R3-S4, 17.3R4, 17.3R4; 17.4 versiones anteriores a 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versiones anteriores a 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versiones anteriores a 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versiones anteriores a 18.2X75-D40; 18.3 versiones anteriores a 18.3R1-S3, 18.3R2; 18.4 versiones anteriores a 18.4R1-S2, 18.4R2. Este problema no afecta a las versiones de Junos anteriores a la 16.1R1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Juniper — Junos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-0019",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "16.1",
              "lessThan": "16.1R7-S4, 16.1R7-S5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "16.2",
              "lessThan": "16.2R2-S9, 16.2R3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "17.1",
              "lessThan": "17.1R3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "17.2",
              "lessThan": "17.2R3-S1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "17.3",
              "lessThan": "17.3R3-S3, 17.3R3-S4, 17.3R4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "17.4",
              "lessThan": "17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "18.1",
              "lessThan": "18.1R2-S4, 18.1R3-S4, 18.1R4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "18.2",
              "lessThan": "18.2R2-S2, 18.2R2-S3, 18.2R3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "18.2X75",
              "lessThan": "18.2X75-D40",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "18.3",
              "lessThan": "18.3R1-S3, 18.3R2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "18.4",
              "lessThan": "18.4R1-S2, 18.4R2",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "all",
              "lessThan": "16.1",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-04-10T20:29:00.413",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/107893",
      "tags": [
        "Broken Link"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10931",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "http://www.securityfocus.com/bid/107893",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.juniper.net/JSA10931",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "sirt@juniper.net",
      "description": [
        {
          "lang": "en",
          "value": "CWE-404"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S4, 16.1R7-S5; 16.2 versions prior to 16.2R2-S9, 16.2R3; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3-S1; 17.3 versions prior to 17.3R3-S3, 17.3R3-S4, 17.3R4; 17.4 versions prior to 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versions prior to 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. This issue does not affect Junos releases prior to 16.1R1."
    },
    {
      "lang": "es",
      "value": "Cuando la función de rastreo BGP (Border Gateway Protocol) está activada, un mensaje BGP entrante puede provocar que el proceso rpd (Routing Protocol Daemon) del Junos OS se cierre inesperadamente y se reinicie. Cuando el rpd se reinicia después de un cierre inesperado, y estos se repiten, puede resultar en una condición de denegación de servicio extendida. Las versiones afectadas son el Juniper Networks Junos OS: 16.1 versiones anteriores a 16.1R7-S4, 16.1R7-S5; 16.2 versiones anteriores a 16.2R2-S9, 16.2R3; 17.1 versiones anteriores a 17.1R3-S1; 17.2 versiones anteriores a 17.2R3-S1; 17.3 versiones anteriores a 17.3R3-S3, 17.3R3-S4, 17.3R4, 17.3R4; 17.4 versiones anteriores a 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versiones anteriores a 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versiones anteriores a 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versiones anteriores a 18.2X75-D40; 18.3 versiones anteriores a 18.3R1-S3, 18.3R2; 18.4 versiones anteriores a 18.4R1-S2, 18.4R2. Este problema no afecta a las versiones de Junos anteriores a la 16.1R1."
    }
  ],
  "lastModified": "2026-06-17T02:07:31.487",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "258A380C-1EA0-407D-B7E3-4A2E8820119C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6D3E38C1-808C-4BD3-993D-F30855F5390F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92F35C19-5AD2-4F98-8313-2E880714DF3B"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9677CE18-B955-432F-BA2B-AAE3D0CA0F16"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E34A149E-C2ED-4D86-A105-0A2775654AE7"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A283D32F-1CAF-4A5A-83E1-585F2801771F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38A40E03-F915-4888-87B0-5950F75F097D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C433359-BC8B-4E69-BE74-A31EB148083A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25C7C3D0-A203-4979-8375-A610ADD48E9E"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "988D317A-0646-491F-9B97-853E8E208276"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DFDD907-5305-4602-8A9C-685AA112C342"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0A756E2-C320-405A-B24F-7C5022649E5A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.2x75:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEC6BBCF-6429-4BD8-9728-4A1B0616D7C9"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.2x75:d20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12805C4D-2737-41E4-8950-5B48636765F9"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.2x75:d5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94667657-E6B9-4245-A30C-3A51202E7551"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5342C3DC-D640-47AB-BD76-3444852988A2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}